Google Professional Google Workspace Administrator Exam Questions and Answers - 1 - Page 2 of 10

The latest Google Professional Google Workspace Administrator certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Google Professional Google Workspace Administrator exam and earn Google Professional Google Workspace Administrator certification.

Question 11

Exam Question

Your organization recently deployed Google Workspace. Your admin team has been very focused on configuring the core services for your environment, which has left you little time to pay attention to other areas. Your security team has just informed you that many users are leveraging unauthorized add-ons, and they are concerned about data exfiltration. The admin team wants you to cut off all add-ons access to Workspace data immediately and block all future add-ons until further notice. However, they approve of users leveraging their Workspace accounts to sign into third-party sites.

What should you do?

A. Modify your Marketplace Settings to block users from installing any app from the Marketplace.
B. Set all API services to “restricted access” and ensure that all connected apps have limited access.
C. Remove all client IDs and scopes from the list of domain-wide delegation API clients.
D. Block each connected app’s access.

Correct Answer

C. Remove all client IDs and scopes from the list of domain-wide delegation API clients.

Reference

Google Workspace Admin Help > Integrate 3rd-party and custom apps > Control external access to Google Workspace data > Control API access with domain-wide delegation

Question 12

Exam Question

Your company has acquired a new company in Japan and wants to add all employees of the acquisition to your existing Google Workspace domain. The new company will retain its original domain for email addresses and, due to the very sensitive nature of its work, the new employees should not be visible in the global directory. However, they should be visible within each company’s separate directory.

What should you do to meet these requirements?

A. Create a new Google Workspace domain isolated from the existing one, and create users in the new domain instead.
B. Under Directory Settings > Contact sharing, disable the contact sharing option and wait for 24 hours to allow the settings to propagate before creating the new employee accounts.
C. Redesign your OU organization to have 2 child OUs for each company directly under the root. In Directory Settings > Visibility Settings, define custom directories for each company, and set up Visibility according to the OU.
D. Create one dynamic group for each company based on a custom attribute defining the company. In Directory Settings > Visibility Settings, define custom directories for each company, and set up Visibility according to the dynamic group.

Correct Answer

A. Create a new Google Workspace domain isolated from the existing one, and create users in the new domain instead.

Reference

Google Workspace Admin Help > Change a user name, photo, or email address > Manage the user Directory for a company or school > Control Directory access and listings > Customize a directory for a team or group

Question 13

Exam Question

Several customers have reported receiving fake collection notices from your company. The emails were received from [email protected], which is the valid address used by your accounting department for such matters, but the email audit log does not show the emails in question. You need to stop these emails from being sent.

What two actions should you take? (Choose two.)

A. Change the password for suspected compromised account [email protected].
B. Configure a Sender Policy Framework (SPF) record for your domain.
C. Configure Domain Keys Identified Mail (DKIM) to authenticate email.
D. Disable mail delegation for the [email protected] account.
E. Disable “Allow users to automatically forward incoming email to another address.”

Correct Answer

Reference

Google Workspace Admin Help > Gmail > Help prevent spoofing, phishing, and spam > Help prevent spoofing and spam with SPF > Help prevent spoofing and spam with SPF

Question 14

Exam Question

Your organization is preparing to deploy Workspace and will continue using your company’s existing identity provider for authentication and single sign-on (SSO). In order to migrate data from an external system, you were required to provision each user’s account in advance. Your IT team and select users (~5% of the organization) have been using Workspace for configuration and testing purposes. The remainder of the organization can technically access their accounts now, but the IT team wants to block their access until the migrations are complete.

What should your organization do?

A. Remove Google Workspace license to prevent users from accessing their accounts now.
B. Suspend users that the organization does not wish to have access.
C. Add the users to the OU with all services disabled.
D. Use Context-Aware Access to simultaneously block access to all services for all users and allow access to all services for the allowed users.

Correct Answer

B. Suspend users that the organization does not wish to have access.

Reference

Google Workspace Admin Help > Integrate 3rd-party and custom apps >Set up SSO via a third party Identity provider > Set up SSO for your organization
Google Workspace Admin Help > Advanced user management > Apply policies to different users > Move users to an organizational unit

Question 15

Exam Question

All Human Resources employees at your company are members of the “HR Department” Team Drive. The HR Director wants to enact a new policy to restrict access to the “Employee Compensation” subfolder stored on that Team Drive to a small subset of the team.

What should you do?

A. Use the Drive API to modify the permissions of the Employee Compensation subfolder.
B. Use the Drive API to modify the permissions of the individual files contained within the subfolder.
C. Move the contents of the subfolder to a new Team Drive with only the relevant team members.
D. Move the subfolder to the HR Director’s MyDrive and share it with the relevant team members.

Correct Answer

C. Move the contents of the subfolder to a new Team Drive with only the relevant team members.

Explanation

Inherited permissions can’t be removed from a file or folder in a shared drive.

Reference

Google Workspace > Google Drive > Guides > Share files, folders & drives

Question 16

Exam Question

You are a Workspace Administrator with a mix of Business Starter and Standard Licenses for your users. A Business Starter User in your domain mentions that they are running out of Drive Storage Quota.

Without deleting data from Drive, what two actions can you take to alleviate the quota concerns for this user? (Choose two.)

A. Add other users as “Editors” on the Drive object, thus spreading the storage quota debt between all of them.
B. Manually export and back up the data locally, and delete the affected files from Drive to alleviate the debt.
C. Make another user the “Owner” of the Drive objects, thus transferring the storage quota debt to them.
D. Perform an API query for large storage drive objects, and delete them, thus alleviating the quota debt.
E. Move the affected items to a Shared Drive. Shared Drives transfer ownership of the drive item to the domain itself, which alleviates the quota debt from that user.

Correct Answer

C. Make another user the “Owner” of the Drive objects, thus transferring the storage quota debt to them.
E. Move the affected items to a Shared Drive. Shared Drives transfer ownership of the drive item to the domain itself, which alleviates the quota debt from that user.

Reference

Google Workspace Admin Help > Storage > Set storage limits

Question 17

Exam Question

Your organization syncs directory data from Active Directory to Google Workspace via Google Cloud Directory Sync. Users and Groups are updated from Active Directory on an hourly basis. A user’s last name and primary email address have to be changed. You need to update the user’s data.

What two actions should you take? (Choose two.)

A. Add the user’s old email address to their account in the Google Workspace Admin panel.
B. Change the user’s primary email address in the Google Workspace Admin panel.
C. Change the user’s last name in the Google Workspace Admin panel.
D. Change the user’s primary email in Active Directory.
E. Change the user’s last name in Active Directory.

Correct Answer

A. Add the user’s old email address to their account in the Google Workspace Admin panel.
D. Change the user’s primary email in Active Directory.
E. Change the user’s last name in Active Directory.

Reference

Google Workspace Admin Help > Google Cloud Directory Sync > About Google Cloud Directory Sync

Question 18

Exam Question

Your organization has noticed several incidents of accidental oversharing inside the organization. Specifically, several users have shared sensitive Google Drive items with the entire organization by clicking ‘anyone in this group with this link can view’. You have been asked by senior management to help users share more appropriately and also to prevent accidental oversharing to the entire organization.

How would you best accomplish this?

A. Create groups, add users accordingly, and educate users on how to share to specific groups of people.
B. Disable sharing to the entire organization so that users must consciously add every person who needs access.
C. Determine sharing boundaries for users that work with sensitive information, and then implement target audiences.
D. Temporarily disable the Google Drive service for individuals who continually overshare.

Correct Answer

B. Disable sharing to the entire organization so that users must consciously add every person who needs access.

Reference

Google Workspace Learning Center > Troubleshoot issues with shared drives

Question 19

Exam Question

On which two platforms can you push WiFi connection information with Google Workspace? (Choose two.)

A. Mac OS
B. Windows
C. Chrome OS
D. iOS
E. Linux

Correct Answer

A. Mac OS
C. Chrome OS
D. iOS

Reference

Google Workspace Admin Help > Manage devices for your organization > Set up networks for managed devices > Set up networks for managed devices (Wi-Fi, Ethernet, VPN, cellular)

Question 20

Exam Question

Your Finance team has to share quarterly financial reports in Sheets with an external auditor. The external company is not a Workspace customer and allows employees to access public sites such as Gmail and Facebook.

How can you provide the ability to securely share content to collaborators that do not have a Google Workspace or consumer (Gmail) account?

A. Allow external sharing with the auditor using the ‘Trusted Domains’ feature.
B. Enable the ‘Visitor Sharing’ feature, and demonstrate it to the Finance team.
C. Use the ‘Publish’ feature in the Sheets editor to share the contents externally.
D. Attach the Sheet file to an email message, and send to the external auditor.

Correct Answer

D. Attach the Sheet file to an email message, and send to the external auditor.

Reference

Google Workspace Learning Center > Top 10 tips to work with people not on Google Workspace